On Thu, 16 Jul 2020 at 10:30, Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx> wrote: > > On Sun, Jul 12, 2020 at 06:39:54PM +0200, Stephan Müller wrote: > > > > diff --git a/lib/mpi/mpi-sub-ui.c b/lib/mpi/mpi-sub-ui.c > > new file mode 100644 > > index 000000000000..fa6b085bac36 > > --- /dev/null > > +++ b/lib/mpi/mpi-sub-ui.c > > @@ -0,0 +1,60 @@ > > +// SPDX-License-Identifier: GPL-2.0-or-later > > +/* mpi-sub-ui.c - MPI functions > > + * Copyright 1991, 1993, 1994, 1996, 1999-2002, 2004, 2012, 2013, 2015 > > + * Free Software Foundation, Inc. > > + * > > + * This file is part of GnuPG. > > + * > > + * Note: This code is heavily based on the GNU MP Library. > > + * Actually it's the same code with only minor changes in the > > + * way the data is stored; this is to support the abstraction > > + * of an optional secure memory allocation which may be used > > + * to avoid revealing of sensitive data due to paging etc. > > + * The GNU MP Library itself is published under the LGPL; > > + * however I decided to publish this code under the plain GPL. > > + */ > > Hmm, you said that this code is from GNU MP. But this notice clearly > says that it's part of GnuPG and is under GPL. Though it doesn't > clarify what version of GPL it is. Can you please clarify this with > the author? > GnuPG was relicensed under GPLv3 in ~2007, IIRC, so given the copyright years and the explicit statements that the file is part of GnuPG and not under the original LGPL license, there is no way we can take this code under the kernel's GPLv2 license.
